uw99 Privacy Policy – How We Collect, Use, and Protect Your Data

1. Data Controller

uw99, operating the platform accessible at uw99.vu, acts as the data controller for all personal data collected from Players and visitors. uw99 is licensed under an international gaming authority, and all data processing activities are conducted in compliance with the obligations imposed by that licence. For all data-related queries, please contact uw99 through the channels listed in Section 14 of this Policy.

2. Personal Data We Collect

uw99 collects personal data across several categories, depending on the nature of your interaction with the platform. The table below summarises the categories of data collected:

uw99 does not collect sensitive special category data (such as racial origin, political opinions, or health data) beyond what is strictly required by the KYC and responsible gaming obligations imposed by our gaming licence.

3. How We Collect Your Data

uw99 collects personal data through the following means:

• Direct Collection: Data you provide during account registration, KYC verification, deposit/withdrawal transactions, support interactions, or promotional form submissions.
• Automated Collection: Technical data collected automatically when you access uw99.vu, including IP address, device identifiers, and session activity via cookies and server logs.
• Third-Party Sources: Identity verification data from KYC service providers; transaction data from payment processors (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and others); fraud screening data from security service providers.

4. Legal Basis for Processing

uw99 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil uw99's obligations under the account agreement — including account management, payment processing, and game result settlement.
• Legal Obligation: Processing required to comply with applicable laws and the obligations of uw99's international gaming licence — including AML checks, KYC verification, and reporting requirements.
• Legitimate Interests: Processing carried out to protect the security and integrity of the uw99 platform, detect fraud, and prevent money laundering — where these interests are not overridden by your rights.
• Consent: Processing for optional activities such as marketing communications, where uw99 has obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

uw99 uses your personal data for the following purposes:

• Opening, maintaining, and administering your uw99 account.
• Verifying your identity and age to comply with KYC requirements and gaming licence obligations.
• Processing deposits, withdrawals, and bonus transactions in Malaysian Ringgit (MYR).
• Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited conduct.
• Providing customer support and resolving disputes or complaints.
• Operating and improving the uw99 platform — including game performance, interface optimisation, and mobile experience improvements.
• Sending transactional communications — account confirmations, security alerts, KYC requests, withdrawal notifications.
• Sending promotional communications where you have consented to receive them, and you may opt out at any time.
• Fulfilling responsible gaming obligations — including monitoring for problem gambling indicators and enforcing self-exclusion or deposit limit requests.
• Complying with reporting obligations to uw99's licensing authority and relevant regulatory bodies.

6. Data Sharing & Disclosure

uw99 does not sell, rent, or trade player personal data. Data may be shared with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other payment processors — to facilitate deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Third-party services contracted by uw99 to perform age and identity verification as required by the gaming licence.
• Fraud Prevention & Security Providers: Services used to detect fraud, unusual account activity, and security threats to the uw99 platform.
• Gaming Technology Providers: Game software providers (such as live casino and slot operators) who require transactional data to settle game results correctly.
• Regulatory & Law Enforcement Authorities: Where uw99 is legally required to disclose data under AML regulations, gaming licence conditions, or court orders.
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by confidentiality obligations and who assist uw99 in meeting its legal and regulatory requirements.

All third parties with whom uw99 shares data are required to implement appropriate security measures and to process data only for the purposes for which it was shared.

7. Cookies & Tracking Technologies

uw99 uses cookies and similar tracking technologies on uw99.vu for the following purposes:

• Strictly Necessary Cookies: Required for the platform to function — session management, login state, and security tokens. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming configurations between sessions.
• Analytics Cookies: Collect aggregated, anonymised data on how Players navigate uw99 — used solely to improve platform performance and user experience. No individual player is identified in analytics data.
• Security Cookies: Assist with fraud detection and prevention by monitoring session behaviour for anomalies.

uw99 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in or use uw99 services.

8. Data Security

uw99 implements a multi-layered security framework to protect personal data from unauthorised access, disclosure, alteration, or destruction. Measures include:

• 256-bit AES encryption for data stored in uw99 databases.
• TLS 1.3 encryption for all data transmitted between your browser and uw99 servers.
• Role-based access controls restricting data access to authorised personnel with a legitimate operational need.
• Periodic security audits and penetration testing of uw99 infrastructure.
• Two-factor authentication required for all uw99 administrative system access.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach affecting your personal data, uw99 will notify affected Players and relevant regulatory authorities within the timeframes required by applicable law.

9. Data Retention

uw99 retains personal data for the following periods:

• Active Account Data: Retained for the duration of the account relationship plus a minimum of five years following account closure, as required by gaming licence AML obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in compliance with AML regulations applicable to gaming operators.
• KYC Documentation: Retained for a minimum of five years from account closure or the completion of the business relationship.
• Customer Support Records: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical & Log Data: Retained for 12 months unless required for longer to support a security investigation or legal proceeding.

Data that is no longer required for any of the above purposes and is not subject to a legal hold will be securely and permanently deleted or anonymised.

10. Your Data Rights

Subject to applicable law and regulatory constraints, you have the following rights regarding your personal data held by uw99:

• Right of Access: Request a copy of the personal data uw99 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of personal data where there is no legitimate legal or regulatory basis for retention. Note that AML, KYC, and gaming licence obligations may prevent deletion of certain data categories.
• Right to Restriction: Request that uw99 restrict processing of your data in certain circumstances, for example while a correction request is being assessed.
• Right to Data Portability: Request a structured, machine-readable copy of the data you provided to uw99, where processing is based on consent or contract.
• Right to Object: Object to processing based on legitimate interests, including profiling for responsible gaming purposes, where applicable.
• Right to Withdraw Consent: Where processing is based on consent (e.g. marketing communications), withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, contact the uw99 data team via the channels listed in Section 14. uw99 will respond to all verified requests within 30 days. Identity verification will be required before any data is disclosed or modified.

11. Children & Minors

uw99 is strictly restricted to individuals aged 21 and above. uw99 does not knowingly collect or process personal data from any individual under the age of 21. If uw99 discovers that data from an underage individual has been collected, that data will be deleted immediately and the associated account will be closed. If you are aware that a minor has registered an account at uw99, please contact our support team immediately. uw99 takes the protection of minors extremely seriously and enforces mandatory age verification before any withdrawal is processed.

12. International Data Transfers

uw99 operates under an international gaming licence and may utilise service providers and infrastructure located outside Malaysia. Where personal data is transferred internationally, uw99 ensures that appropriate safeguards are in place — including contractual data processing agreements that require recipient organisations to apply data protection standards equivalent to those applied by uw99. Player financial data processed by Malaysian payment service providers (Maybank, CIMB, Touch n Go eWallet, Boost) remains within Malaysian banking infrastructure as governed by those providers' own regulatory obligations.

13. Amendments to This Policy

uw99 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Players via the email address on file or through a notice displayed upon next login to the platform. The date of the most recent revision is displayed at the top of this Policy. Continued use of uw99 after the effective date of any amendment constitutes acceptance of the revised Policy. Players who do not accept the amended Policy may close their account in accordance with the Terms & Conditions.

14. Contact & Data Requests

For all privacy-related queries, data subject requests, or concerns regarding uw99's data handling practices, please contact the uw99 team through the following channels:

• Live Chat: Available 24/7 via the uw99 platform. State that your query is privacy-related so it is routed to the appropriate team.
• Support Email: [email protected] — displayed as plain text only, not a clickable link. Include your registered username and a description of your request. Responses are issued within 30 days for formal data requests and within 12 hours for general support queries.

uw99 will acknowledge all formal data requests within five business days. Identity verification will be required before any personal data is disclosed, corrected, or deleted.